Charging station, battery management system and charging method

Abstract

A charging station (20) charges an electric storage device (120), and includes an authentication unit (202) that performs mutual authentication with the electric storage device (120) connected for charging, a communication unit (205) that obtains a deterioration degree related to deterioration of the electric storage device (120) from the electric storage device (120) confirmed to be authentic in the mutual authentication, a recording unit (204) that stores the deterioration degree obtained by the communication unit (205) and has tamper resistance, and a control unit (203) that does not charge the electric storage device (120) in a case where the deterioration degree of the electric storage device (120) shows more deterioration than a prescribed threshold value.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to a charging station, a battery management system, and a charging method for detecting tampering and deterioration of a power storage device mounted on an electric vehicle. BACKGROUND

[0002] In Patent Literature 1, a method for detecting a tampered power storage device in which a password module of a regular product is improperly introduced is disclosed.

[0003] (PRIOR ART DOCUMENTS)

[0004] (PATENT LITERATURE)

[0005] Patent Literature 1: International Publication No. 2013 / 108318 SUMMARY

[0006] A problem in the method like Patent Literature 1 is that the amount of electricity available to the power storage device cannot be maintained to be a certain amount or more.

[0007] To achieve the above object, a charging station according to one aspect of the present disclosure, which charges a power storage device, includes: an authentication unit that performs mutual authentication with the power storage device connected for charging; an acquisition unit that acquires a deterioration degree related to deterioration of the power storage device from the power storage device whose legitimacy is confirmed in the mutual authentication; a memory that stores the deterioration degree acquired by the acquisition unit and has tamper resistance; and a control unit that does not charge the power storage device in a case where the deterioration degree of the power storage device stored in the memory shows more deterioration than a prescribed threshold value.

[0008] Further, a battery management system according to one aspect of the present disclosure includes a power storage device and a charging station, the power storage device including: a first authentication unit that performs mutual authentication with the charging station connected for charging; a first memory that stores a deterioration degree related to deterioration of the power storage device and has tamper resistance; and a transmission unit that transmits the deterioration degree stored in the first memory to the charging station, the charging station including: a second authentication unit that performs mutual authentication with the power storage device connected for charging; a second acquisition unit that acquires a deterioration degree related to deterioration of the power storage device from the power storage device whose legitimacy is confirmed in the mutual authentication; a second memory that stores the deterioration degree acquired by the second acquisition unit and has tamper resistance; and a control unit that does not charge the power storage device in a case where the deterioration degree of the power storage device stored in the second memory shows more deterioration than a prescribed threshold value.

[0009] Also, a charging method according to an aspect of the present disclosure is a charging method of a charging station that charges an electricity storage device, and the charging method performs mutual authentication between the electricity storage device connected to the charging station for charging, obtains a deterioration degree related to deterioration of the electricity storage device from the electricity storage device for which propriety is confirmed in the mutual authentication, stores the obtained deterioration degree to a memory included in the charging station and having tamper resistance, and does not charge the electricity storage device in a case where the deterioration degree of the electricity storage device shows more deterioration than a prescribed threshold value.

[0010] According to the present disclosure, it is possible to maintain the amount of electricity that can be used by the electricity storage device to be equal to or more than a certain amount. BRIEF DESCRIPTION OF DRAWINGS

[0011] Figure 1 is a diagram showing an example of the overall structure of a battery management system according to an embodiment.

[0012] Figure 2 is a block diagram showing an example of the overall structure of an electric vehicle according to an embodiment.

[0013] Figure 3 is a block diagram showing an example of the structure of a vehicle management unit according to an embodiment.

[0014] Figure 4 is a block diagram showing an example of the structure of an electricity storage device according to an embodiment.

[0015] Figure 5 is a block diagram showing an example of the structure of a charging station according to an embodiment.

[0016] Figure 6 is a block diagram showing an example of the structure of a server according to an embodiment.

[0017] Figure 7 is a sequence diagram showing an example of a charging process according to an embodiment.

[0018] Figure 8 is a sequence diagram showing an example of an authentication process between an electricity storage device and an electric vehicle according to an embodiment.

[0019] Figure 9 is a sequence diagram showing an example of a battery ID notification process according to an embodiment. DETAILED DESCRIPTION

[0020] (Knowledge on which the present disclosure is based)

[0021] In recent years, electric vehicles such as electric cars and electric motorcycles have begun to be used. In a known service, for the power source of an electric vehicle, an exchange-type power storage device having a secondary battery is used, and the power storage device is exchanged. In this service, a plurality of power storage devices are simultaneously charged in advance in a charging station, and the charged power storage devices are provided to users at any time. The users exchange the power storage device having a small remaining battery amount with another power storage device that has been charged in the charging station. Accordingly, the users can continue the travel of the electric vehicle by exchanging the power storage device, regardless of the charging time of the power storage device, and thus, it is expected that the travel distance can be extended and the like.

[0022] Further, by using the power storage device common to each manufacturer of electric vehicles, it is expected that the scale benefit of the charging station of each manufacturer can be obtained.

[0023] On the other hand, if an improper power storage device is mixed in the service of exchanging the power storage device, the electric vehicle cannot operate properly, or in the worst case, a fire caused by the power storage device occurs. In Patent Document 1, a method is disclosed in which corresponding charge-discharge information is established using identification information of an encryption key for mutual authentication between a charge-discharge device that performs charging or discharging and a power storage device connected to the charge-discharge device, and connection information about the charge-discharge device obtained when the charge-discharge device and the power storage device are connected, and it is determined whether the connection information corresponding to the same identification information exists in a plurality, thereby detecting an improper battery.

[0024] However, even a proper power storage device that satisfies the criteria deteriorates the secondary battery of the power storage device (hereinafter, the deterioration of the secondary battery of the power storage device will be simply referred to as the deterioration of the power storage device) depending on the usage conditions and the like. At this time, if the usage history including the usage conditions and the like of the power storage device is tampered with, the deterioration of the power storage device cannot be detected. Therefore, in the service of exchanging the power storage device, the deteriorated power storage device is widely circulated.

[0025] If the deteriorated power storage device is widely used, even if the power storage device is exchanged after being charged, the distance that can be traveled continues to be short in the case where the exchanged power storage device is a deteriorated power storage device, and the frequency of exchange is high.

[0026] Thus, if the usage history of the power storage device is tampered with or the deteriorated power storage device is widely circulated, the available electric power of the power storage device decreases. Therefore, in order to maintain the available electric power of the power storage device to be a certain amount or more, both a structure in which the usage history of the power storage device is not tampered with and a structure in which the deteriorated power storage device is suppressed from being circulated are required.

[0027] One aspect of the present disclosure relates to a charging station that charges an electric storage device, the charging station including: an authentication unit that performs mutual authentication with the electric storage device connected for charging; an acquisition unit that acquires a deterioration degree related to deterioration of the electric storage device from the electric storage device whose legitimacy is confirmed in the mutual authentication; a storage that stores the deterioration degree acquired by the acquisition unit and has tamper resistance; and a control unit that does not charge the electric storage device in a case where the deterioration degree of the electric storage device stored in the storage shows more deterioration than a prescribed threshold value.

[0028] Accordingly, the charging station acquires the deterioration degree of the electric storage device from the electric storage device whose legitimacy is confirmed in the mutual authentication, and does not charge the electric storage device in a case where the deterioration degree shows more deterioration than a prescribed threshold value. Therefore, it is possible to suppress utilization and circulation of the deteriorated electric storage device. Accordingly, it is possible to maintain the amount of electricity that can be utilized by the electric storage device to be a certain amount or more.

[0029] Also, the control unit can charge the electric storage device in a case where the deterioration degree of the electric storage device does not show more deterioration than the prescribed threshold value.

[0030] Therefore, it is possible to charge the electric storage device that is not further deteriorated, without charging the electric storage device that is more deteriorated.

[0031] Also, the deterioration degree can be at least one of the number of times of charging, the amount of charging, and SOH (State Of Health).

[0032] Therefore, it is possible to judge the deterioration degree of the electric storage device in accordance with the number of times of charging, the amount of charging, and SOH (State Of Health).

[0033] Also, the acquisition unit can further acquire an identifier of the electric storage device, and the control unit can transmit the identifier of the electric storage device to a management device in a case where the deterioration degree of the electric storage device shows more deterioration than the prescribed threshold value.

[0034] Therefore, it is possible to easily distinguish the deteriorated electric storage device.

[0035] Also, the acquisition unit can further acquire an identifier of the electric storage device, and the control unit can transmit the identifier of the electric storage device to a management device in a case where the deterioration degree of the electric storage device shows more deterioration than the prescribed threshold value.

[0036] Therefore, it is possible to easily distinguish the deteriorated electric storage device.

[0037] Also, the deterioration degree can be the number of times of charging, and the control section transmits, to the management device, a new number of times of charging obtained by adding 1 to the number of times of charging of the power storage device stored in the storage, in a case where the power storage device is charged.

[0038] Therefore, the number of times of charging of the power storage device can be appropriately managed.

[0039] Also, the battery management system according to one aspect of the present disclosure includes a power storage device and a charging station. The power storage device includes a first authentication section that performs mutual authentication with the charging station connected for charging, a first storage that stores a deterioration degree related to deterioration of the power storage device and has tamper resistance, and a transmission section that transmits the deterioration degree stored in the first storage to the charging station. The charging station includes a second authentication section that performs mutual authentication with the power storage device connected for charging, a second acquisition section that acquires a deterioration degree related to deterioration of the power storage device from the power storage device confirmed to be authentic in the mutual authentication, a second storage that stores the deterioration degree acquired by the second acquisition section and has tamper resistance, and a control section that does not charge the power storage device in a case where the deterioration degree of the power storage device stored in the second storage shows more deterioration than a prescribed threshold value.

[0040] Therefore, even in a case where the electric vehicle cannot communicate, the battery ID of the other power storage device can be transmitted to the charging station via the authentic power storage device.

[0041] Also, the first authentication section can further perform mutual authentication with an electric vehicle connected to the power storage device, and the power storage device can further include a first acquisition section that acquires an identifier of the other power storage device different from the power storage device from the electric vehicle, the first storage can store the identifier of the other power storage device acquired by the first acquisition section, and the transmission section can transmit the identifier of the other power storage device stored in the first storage to the charging station connected for charging.

[0042] Accordingly, the charging station acquires the deterioration degree of the power storage device from the power storage device confirmed to be authentic in the mutual authentication, and does not charge the power storage device in a case where the deterioration degree shows more deterioration than a prescribed threshold value. Therefore, the deteriorated power storage device can be suppressed from being used and circulated. Accordingly, the amount of electric power that can be used by the power storage device can be maintained to be a certain amount or more.

[0043] Also, the charging method according to an aspect of the present disclosure is a charging method of a charging station that charges an electric storage device, and authenticates the electric storage device and the charging station with each other in order to charge the electric storage device, obtains a deterioration degree related to deterioration of the electric storage device from the electric storage device whose authenticity is confirmed in the authentication, stores the obtained deterioration degree to a memory included in the charging station and having tamper resistance, and does not charge the electric storage device in a case where the deterioration degree of the electric storage device shows more deterioration than a prescribed threshold value.

[0044] Accordingly, the charging station obtains the deterioration degree of the electric storage device stored in the first memory having tamper resistance from the electric storage device whose authenticity is confirmed by the mutual authentication, and does not charge the electric storage device in a case where the deterioration degree shows more deterioration than a prescribed threshold value. Therefore, it is possible to appropriately determine whether to perform charging of the electric storage device using the deterioration degree that is not tampered with. Accordingly, it is possible to suppress the use and circulation of the deteriorated electric storage device. Accordingly, it is possible to maintain the amount of electricity that can be used by the electric storage device to be a certain amount or more.

[0045] Hereinafter, a battery management system according to an embodiment of the present disclosure will be described with reference to the drawings. Note that each of the embodiments to be described below is an example illustrating a preferred embodiment of the present disclosure. Therefore, numerical values, shapes, materials, constituent elements, arrangement and connection modes of the constituent elements, steps, order of steps, and the like shown in the following embodiments are merely examples, and the gist of the present disclosure is not limited to them. The present disclosure is determined in accordance with the description of the embodiments. Therefore, among the constituent elements in the following embodiments, a constituent element not described in the embodiments of the present disclosure is not essential to achieve the object of the present disclosure, and is described as a constituent element constituting a more preferred mode.

[0046] (Embodiment)

[0047] [1. System configuration]

[0048] Here, an example of an embodiment of the present disclosure will be described with reference to the drawings.

[0049] [1.1 Overall configuration of battery management system]

[0050] Figure 1 is a view showing an example of the overall configuration of the battery management system according to the embodiment. The battery management system 100 includes an electric storage device 120, an electric vehicle 10 that operates by the electric power of the electric storage device 120, and a charging station 20 that charges the electric storage device 120. The battery management system 100 can further include a server 30, a charging device 40, and a communication network 50. The charging station 20 and the server 30 are connected to be communicable via the communication network 50.

[0051] In addition, the communication network 50 can be a general-purpose network such as the Internet, or a dedicated network. The communication network 50 can also include a mobile communication system such as a third generation mobile communication system (3G), a fourth generation mobile communication system (4G), a fifth generation mobile communication system (5G), or LTE (registered trademark).

[0052] [1.2 Structure of Electric Vehicle]

[0053] Figure 2 is a block diagram showing an example of the overall structure of an electric vehicle to which the embodiment is applied.

[0054] The electric vehicle 10 is provided with a vehicle management unit 110, a communication unit 130, and a connection unit 140.

[0055] The vehicle management unit 110 is a processing unit that performs control of the operation of the electric vehicle 10. The specific structure of the vehicle management unit 110 will be described later using Figure 3 The vehicle management unit 110 is realized, for example, by a control circuit including a processor and a memory.

[0056] The communication unit 130 can be connected to the server 30 via the communication network 50 so as to be communicable, or can be connected to other devices via the communication network 50 so as to be communicable. Also, the communication unit 130 can be connected to other devices so as to be directly communicable. The communication interface that realizes the communication unit 130 is a communication interface that can be communicatively connected to the communication network 50. Specifically, the communication interface is a communication interface that is communicatively connected to the communication network 50 by communicatively connecting to a base station of a mobile communication system. The communication interface can also be, for example, a wireless communication interface that conforms to a communication standard used in a mobile communication system such as a third generation mobile communication system (3G), a fourth generation mobile communication system (4G), a fifth generation mobile communication system (5G), or LTE (registered trademark). Also, the communication interface can be, for example, a wireless LAN (Local Area Network) interface that conforms to IEEE 802.11a, b, g, n, ac standards, or a communication interface that is communicatively connected to the communication network 50 by communicatively connecting to a not-illustrated router (for example, a mobile wireless LAN router). In addition, the communication interface that realizes the communication unit 130 can also be included in the control circuit that realizes the vehicle management unit 110.

[0057] The connection section 140 is connected to the electric storage device 120 and receives supply of electric power from the electric storage device 120. The electric power from the electric storage device 120 is supplied to an actuator (e.g., a motor) that generates power of the electric vehicle 10, a control circuit that realizes the vehicle management section 110, a communication interface that realizes the communication section 130, and the like. Also, the connection section 140 receives information of the electric storage device 120, i.e., battery information, from the electric storage device 120. The connection section 140 has a power reception terminal (not shown in the drawing) for connecting to a power terminal of the electric storage device 120 to receive supply of electric power from the electric storage device 120, and a communication terminal (not shown in the drawing) for connecting to a communication terminal of the electric storage device 120 to receive the information of the electric storage device 120, i.e., the battery information, from the electric storage device 120.

[0058] [1.2.1 Structure of Vehicle Management Section]

[0059] Figure 3 is a block diagram showing an example of the structure of the vehicle management section according to the embodiment.

[0060] The vehicle management section 110 includes an authentication section 1101, a control section 1102, a charge management section 1103, and a recording section 1104.

[0061] The authentication section 1101 performs authentication of the electric storage device 120 connected to the connection section 140. The authentication section 1101 has a security chip that holds an encryption key or a certificate for authentication. The security chip has tamper resistance in order to prevent tampering and leakage of the held encryption key or certificate.

[0062] In addition, the authentication section 1101 can not have the security chip that holds the encryption key or the certificate. In the case where the authentication section 1101 does not have the security chip, the vehicle management section 1101 can have the security chip, for example. The authentication section 1101 that does not have the security chip holds an encrypted encryption key or certificate. The authentication section 1101 can decrypt the encrypted encryption key or certificate in the security chip of the vehicle management section 110 and perform authentication using the decrypted encryption key or certificate.

[0063] The authentication unit 1101 performs authentication of the power storage device 120, and outputs an ID (hereinafter referred to as a battery ID) of an improper power storage device 120 to the recording unit 1104 in a case where the result of the authentication is that the power storage device 120 connected to the connection unit 140 is improper. Note that the battery ID is an example of an identifier that identifies the power storage device 120. The authentication unit 1101 notifies the server 30 of the improper battery ID of the improper power storage device 120 connected to the connection unit 140 in a case where the electric vehicle 10 is connected to the server 30 via a network. The authentication unit 1101 can perform mutual authentication with the power storage device 120 using, for example, TLS (Transport Layer Security).

[0064] The control unit 1102 controls the operation of the electric vehicle 10. The control unit 1102 controls the operation of an actuator that generates power for the electric vehicle 10 in accordance with an operation of a user of the electric vehicle 10. For example, the control unit 1102 controls the operation of the electric vehicle 10 related to running in accordance with an operation of the user.

[0065] The charge management unit 1103 performs charge control of the power storage device 120 connected to the connection unit 140. The charge management unit 1103 charges the power storage device 120 connected to the connection unit 140 of the electric vehicle 10 with power from a power source in a case where the electric vehicle 10 is connected to the power source. The power source can be, for example, the charging device 40 or a socket in a home.

[0066] The recording unit 1104 manages the improper battery ID of the improper power storage device 120. The recording unit 1104 stores the improper battery ID of the improper power storage device 120, and manages the improper battery ID of the improper power storage device 120 by storing the improper battery ID of the improper power storage device 120 connected to the connection unit 140 each time the improper power storage device 120 is connected to the connection unit 140. The recording unit 1104 can store the improper battery ID and the date and time when the improper power storage device 120 having the improper battery ID was connected to the connection unit 140 in association with each other. The recording unit 1104 can be a security chip (memory) having tamper resistance.

[0067] Thus, in the vehicle management unit 110, the authentication unit 1101 and the recording unit 1104 perform processing for managing the battery ID with respect to the improper power storage device 120. Note that the authentication unit 1101 and the recording unit 1104 can perform processing for managing the battery ID of the proper power storage device 120 in addition to the processing for managing the battery ID of the improper power storage device 120.

[0068] In a case where the battery IDs of the proper electric storage devices 120 are also managed, the authentication section 1101 further outputs the proper battery ID of the proper electric storage device 120 to the recording section 1104 in a case where the proper electric storage device 120 is connected to the connection section 140. The authentication section 1101 notifies the server 30 of the proper battery ID of the proper electric storage device 120 connected to the connection section 140 in a case where the electric vehicle 10 is network-connected to the server 30. The authentication section 1101 also outputs an identifier showing whether it is proper or improper in correspondence with each battery ID in order to distinguish the battery ID of the improper electric storage device 120 from the battery ID of the proper electric storage device 120.

[0069] Further, the recording section 1104 further manages the battery IDs of the proper electric storage devices 120. That is, the recording section 1104 manages the battery IDs of the improper electric storage devices 120 and the battery IDs of the proper electric storage devices 120. The recording section 1104 stores the battery IDs of all the electric storage devices 120 connected to the connection section 140 regardless of whether they are proper or improper, and stores the battery IDs of the electric storage devices 120 connected to the connection section 140 each time the electric storage devices 120 are connected to the connection section 140. The recording section 1104 also stores an identifier showing whether it is proper or improper in order to distinguish the battery ID of the improper electric storage device 120 from the battery ID of the proper electric storage device 120. Accordingly, the recording section 1104 manages the battery IDs of the improper electric storage devices 120 and the battery IDs of the proper electric storage devices 120.

[0070] [1.2.2 Structure of Electric Storage Device]

[0071] Figure 4 is a block diagram showing an example of the structure of the electric storage device according to the embodiment.

[0072] The electric storage device 120 includes an authentication section 1201, a measurement section 1202, a control section 1203, a recording section 1204, and a communication section 1205.

[0073] The authentication section 1201 performs authentication of the vehicle management section 110 connected for the purpose of providing electric power stored in the electric storage device 120 or the charging station 20 connected for the purpose of charging the electric storage device 120. The authentication section 1201 has a security chip that holds an encryption key or a certificate for authentication. The security chip has tamper resistance in order to prevent tampering and leakage of the held encryption key or certificate.

[0074] Further, the authentication unit 1201 can not have a security chip that holds an encryption key or a certificate. In a case where the authentication unit 1201 does not have a security chip, for example, the power storage device 120 can have a security chip. The authentication unit 1201 that does not have a security chip holds an encrypted encryption key or certificate. The authentication unit 1201 can also decrypt the encrypted encryption key or certificate in the security chip of the power storage device 120 and perform authentication using the decrypted encryption key or certificate.

[0075] The authentication unit 1201 performs authentication of the electric vehicle 10 or the charging station 20 each time of connection and, according to a result of the authentication, in a case where the connected electric vehicle 10 is improper or in a case where the connected charging station 20 is improper, records an ID of the improper electric vehicle 10 (hereinafter referred to as a vehicle ID) or an ID of the improper charging station 20 (hereinafter referred to as a station ID) to the recording unit 1204. The authentication unit 1201 can perform mutual authentication with the electric vehicle 10 or the charging station 20, for example, using TLS.

[0076] The measurement unit 1202 measures a degree of deterioration related to deterioration of the power storage device 120. The measurement unit 1202 can measure the degree of deterioration at every certain period or can measure the degree of deterioration each time of connection with the electric vehicle 10 or the charging station 20. The degree of deterioration is, for example, at least one of a number of times of charging at which the power storage device 120 is charged, a charge amount of the power storage device 120, and an SOH (State Of Health) of the power storage device 120. The charge amount of the power storage device 120 can be a charge amount per time or can be a cumulative charge amount. As for the number of times of charging and the charge amount, the greater the number, the greater the degree of deterioration is shown. As for the SOH, the smaller the number, the greater the degree of deterioration is shown.

[0077] The control unit 1203 performs control of charging and discharging of the power storage device 120.

[0078] The recording unit 1204 stores the degree of deterioration measured by the measurement unit 1202. The recording unit 1204 can also store the degree of deterioration in correspondence with a date and time at which the degree of deterioration is measured. The recording unit 1204 can have a security chip (memory) that has tamper resistance in a manner that tampering of the stored degree of deterioration is not generated.

[0079] The communication unit 1205 is connected to the connection unit 140 of the electric vehicle 10 and thereby connected to the electric vehicle 10 so as to be communicable. The communication unit 1205 is also connected to the charging station 20 for charging and thereby connected to the charging station 20 so as to be communicable.

[0080] [1.3 Structure of Charging Station]

[0081] Figure 5is a block diagram showing an example of the structure of a charging station to which the embodiments are applied.

[0082] The charging station 20 includes a user authentication section 201, a battery authentication section 202, a control section 203, a recording section 204, and a communication section 205.

[0083] The user authentication section 201 authenticates a user who uses the charging station 20. The user authentication section 201 can also acquire an ID and a password of the user from an input interface not shown in the figure, and thereby perform password authentication using the ID and the password of the user. In the password authentication, the user authentication section 201 performs authentication of the user by comparing a pre-registered ID and password of the user with the ID and the password of the user acquired from the input interface. The pre-registered ID and password of the user are an example of user information.

[0084] Further, the user authentication section 201 can also perform authentication using a membership card held by the user. In the authentication using the membership card, the user authentication section 201 performs authentication of the user by comparing pre-registered information of the membership card with information of the membership card read by the input interface. The pre-registered information of the membership card is an example of user information.

[0085] Further, the user authentication section 201 can also perform biometric identification of the user. In the biometric identification, for example, face recognition or iris recognition using an input interface such as a camera can also be performed. In the biometric identification, the user authentication section 201 can also perform authentication of the user by comparing pre-registered biometric information of the user with biometric information of the user read by the input interface. The pre-registered biometric information of the user is an example of user information.

[0086] The user authentication section 201 can also use an existing authentication method in addition to the above-described authentication methods. The user authentication section 201 can also acquire pre-registered user information for authentication of the user from the server 30. The user authentication section 201 can also transmit user information acquired from the input interface at the time of authentication to the server 30, and acquire a result of authentication processing by the server 30.

[0087] The battery authentication section 202 is stored in the charging station 20, and performs authentication of the storage device 120 connected for charging. The battery authentication section 202 has a security chip that holds an encryption key or a certificate for authentication. The security chip has tamper resistance in order to prevent tampering and leakage of the held encryption key or certificate.

[0088] Further, the battery authentication section 202 can not have a security chip that holds the encryption key or the certificate. In the case where the battery authentication section 202 does not have a security chip, for example, the charging station 20 can have a security chip. The battery authentication section 202 that does not have a security chip holds the encrypted encryption key or the certificate. The battery authentication section 202 can decrypt the encrypted encryption key or the certificate in the security chip of the charging station 20, and perform authentication using the decrypted encryption key or the certificate.

[0089] The battery authentication section 202 notifies the server 30 of the number of times of charging in the case where the authentication of the secondary battery is successful and charging is completed. The battery authentication section 202 can perform mutual authentication with the power storage device 120 connected for charging, for example, using TLS.

[0090] The communication section 205 is communicatively connected with the power storage device 120 connected for charging, and obtains battery information about the power storage device 120 from the power storage device 120. The battery information includes at least one of the battery ID and the deterioration degree. The communication section 205 can obtain the deterioration degree about the deterioration of the power storage device 120 whose legitimacy is confirmed by the battery authentication section 202 from the power storage device 120 whose legitimacy is confirmed, in the case where the legitimacy of the power storage device 120 connected for charging is confirmed by the battery authentication section 202. The communication section 205 is an example of an obtaining section.

[0091] The control section 203 is stored in the charging station 20, and performs control of charging of the power storage device 120 connected for charging. The control section 203 performs judgment of the deterioration degree of the power storage device 120 in the case where the authentication of the user is successful by the user authentication section 201 and the authentication of the power storage device 120 is successful by the battery authentication section 202, that is, in the case where the user is a legitimate user and the power storage device 120 is a legitimate power storage device 120. The control section 203 does not perform charging of the power storage device 120 in the case where the authentication of the user fails by the user authentication section 201 and the authentication of the power storage device 120 fails by the battery authentication section 202, that is, in the case where the user is an illegitimate user or the power storage device 120 is an illegitimate power storage device 120. That is, in this case, the control section 203 prohibits charging of the power storage device 120.

[0092] The control section 203 performs the deterioration degree judgment of the electric storage device 120. That is, the control section 203 judges whether the deterioration degree of the electric storage device 120 is more deteriorated than a prescribed threshold value. Also, the control section 203 does not charge the electric storage device 120 in a case where the deterioration degree of the electric storage device 120 shows more deterioration than the prescribed threshold value. That is, in this case, the control section 203 prohibits the charging of the electric storage device 120. Also, the control section 203 charges the electric storage device 120 in a case where the deterioration degree of the electric storage device 120 does not show more deterioration than the prescribed threshold value. That is, the control section 203 does not perform the charging of the electric storage device 120 more deteriorated than the prescribed deterioration degree, and performs the charging of the electric storage device 120 not more deteriorated than the prescribed deterioration degree.

[0093] Also, in the deterioration degree judgment, the control section 203 judges whether the number of times of charging is more than a prescribed number of times of charging as the prescribed threshold value in a case where the deterioration degree is the number of times of charging. The control section 203 judges that the deterioration degree of the electric storage device 120 is more deteriorated than the prescribed deterioration degree in a case where the number of times of charging is more than the prescribed number of times of charging, and judges that the deterioration degree of the electric storage device 120 is not more deteriorated than the prescribed deterioration degree in a case where the number of times of charging is the prescribed number of times of charging or less.

[0094] Also, in the deterioration degree judgment, the control section 203 judges whether the amount of charging is more than a prescribed amount of charging as the prescribed threshold value in a case where the deterioration degree is the amount of charging. The control section 203 judges that the deterioration degree of the electric storage device 120 is more deteriorated than the prescribed deterioration degree in a case where the amount of charging is more than the prescribed amount of charging, and judges that the deterioration degree of the electric storage device 120 is not more deteriorated than the prescribed deterioration degree in a case where the amount of charging is the prescribed amount of charging or less.

[0095] Also, in the deterioration degree judgment, the control section 203 judges whether the SOH is less than a prescribed SOH as the prescribed threshold value in a case where the deterioration degree is the SOH. The control section 203 judges that the deterioration degree of the electric storage device 120 is more deteriorated than the prescribed deterioration degree in a case where the SOH is less than the prescribed SOH, and judges that the deterioration degree of the electric storage device 120 is not more deteriorated than the prescribed deterioration degree in a case where the SOH is the prescribed SOH or more.

[0096] Also, the control section 203 can transmit the battery ID of the electric storage device 120 for which the propriety is not confirmed in the mutual authentication, that is, the battery ID of the electric storage device 120 that is not proper, to the server 30 via the communication section 205. Also, the control section 203 can transmit the battery ID of the electric storage device 120 whose deterioration degree shows more deterioration than the prescribed threshold value to the server 30 via the communication section 205.

[0097] The recording section 204 stores the battery ID of the electric storage device 120 connected to the charging station 20 for charging. The recording section 204 stores the battery ID of all the electric storage devices 120 connected for charging, and stores the battery ID of the electric storage device 120 connected each time the electric storage device 120 is connected. The recording section 204 can also store the battery ID in correspondence with the date and time of connection of the electric storage device 120 having the battery ID to the charging station. The recording section 204 can also store an identifier showing whether the electric storage device 120 is improper or proper in order to distinguish the battery ID of the improper electric storage device 120 from the battery ID of the proper electric storage device 120. The recording section 204 thereby manages the battery ID of the improper electric storage device 120 and the battery ID of the proper electric storage device 120. The recording section 204 can also be a security chip (memory) having tamper resistance.

[0098] Also, the recording section 204 can store the deterioration degree of the electric storage device 120 obtained from the electric storage device 120. Also, the recording section 204 stores the battery ID in correspondence with the deterioration degree obtained in the case where the deterioration degree corresponding to the battery ID of the electric storage device 120 connected to the charging station 20 is obtained from the server 30.

[0099] [1.4 Structure of Server]

[0100] Figure 6 is a block diagram showing an example of the structure of the server according to the embodiment.

[0101] The server 30 includes a user management section 301, a battery management section 302, an encryption key management section 303, a recording section 304, and a communication section 305. The server 30 is an example of a management device.

[0102] The user management section 301 manages user information of a user who is the object of provision of a service. The user management section 301 causes the user to register user information at the start of use of the service, thereby obtaining the user information from the user in advance, and uses the obtained user information for authentication. The user information managed by the user management section 301 can be, for example, an ID and a password of the user as described above, can be information of a membership card held by the user, or can be biological information such as a feature amount of a face image for face recognition, a feature amount of an iris image for iris recognition, and the like.

[0103] The battery management section 302 performs management of the electric storage device 120. The battery management section 302 stores the battery IDs of the plurality of electric storage devices 120 that are shipped. The battery management section 302 can also, for example, detect, in the case where a plurality of identical battery IDs are detected with respect to the battery IDs of the electric storage devices 120 connected to the charging station 20 that are obtained via the communication section 305, the battery IDs of the plurality of identical electric storage devices 120 as being improper battery IDs. The battery management section 302 stores the detected improper battery IDs to the recording section 304 as improper battery IDs. The battery management section 302, for example, updates the identification information corresponding to the battery IDs stored in the recording section 304 from indicating proper identification information to indicating improper identification information. Also, the battery management section 302 updates the identification information corresponding to the same battery IDs from indicating proper identification information to indicating improper identification information in the recording section 304 and the improper battery IDs obtained from the charging station 20 by the communication section 305.

[0104] The encryption key management section 303 performs management of the encryption keys stored in the electric vehicle 10, the electric storage device 120, and the charging station 20. The encryption key management section 303, for example, stores the IDs of the electric vehicle 10, the electric storage device 120, and the charging station 20 each in association with the encryption keys corresponding to these IDs to the recording section 304. The encryption key management section 303 performs management of the encryption keys by performing issuance or invalidation of the encryption keys. Specifically, the encryption key management section 303 performs management of the encryption keys by storing the encryption keys in association with identification information indicating whether the encryption keys are valid or invalid to the recording section 304. The encryption keys can be issued by a third party organization or by the server 30. The issued encryption keys are transmitted to the manufacturers of the respective electric vehicles or the manufacturers of the secondary batteries, the charging station 20, and stored in each of the electric vehicle 10, the electric storage device 120, and the charging station 20.

[0105] The recording section 304 stores the battery IDs of the electric storage device 120, the encryption keys or certificates issued to the electric storage device 120. Also, the recording section 304 stores the vehicle IDs of the electric vehicle 10, the encryption keys or certificates issued to the electric vehicle 10. Also, the recording section 304 stores the station IDs of the charging station 20, the encryption keys or certificates issued to the charging station 20.

[0106] [1.5 Structure of Charging Device]

[0107] The charging device 40 charges the power storage device 120 detached from the electric vehicle 10, or charges the power storage device 120 mounted on the electric vehicle 10 via a charging machine attached to the electric vehicle 10. At this time, the power storage device 120 can store information of the deterioration degree or the charging device 40 that charged the power storage device 120 to the recording section 1104. The information of the charging device 40 can include, for example, a place where the charging device 40 is installed, a date and time when the power storage device 120 is charged, a charging time required for charging the power storage device 120, information showing whether the charging of the power storage device 120 is quick charging or slow charging, and the like. The power storage device 120 can store, as the information of the charging device 40, position information of the electric vehicle 10 or the power storage device 120 at the time of charging, in a case where the electric vehicle 10 or the power storage device 120 can obtain position information showing the position of the device. The charging device 40 can stop charging the power storage device 120 if it is determined that the power storage device 120 is subjected to abnormal charging. The abnormal charging can be, for example, charging at a voltage higher than a prescribed voltage, charging at a current higher than a prescribed current, or charging at a temperature lower than a prescribed temperature (air temperature).

[0108] [1.6 Sequence at the time of charging]

[0109] Hereinafter, a sequence at the time of charging among the power storage device 120, the charging station 20, and the server 30 will be described.

[0110] Figure 7 is a sequence diagram showing an example of the charging process according to the embodiment.

[0111] (Step S101) The charging station 20 authenticates a user who comes to exchange the power storage device 120. The charging station 20 releases a door lock of a charging space in which the power storage device 120 for which charging has been completed is placed, and opens the door, if the user is determined to be a legitimate user. Accordingly, the user can exchange the power storage device 120 for which charging has been completed, which is placed in the charging space in which the door lock is released, with the power storage device 120 used by the electric vehicle 10.

[0112] (Step S102) In a case where the user stores the power storage device 120 used by the electric vehicle 10 in the charging station 20, the charging station 20 and the power storage device 120 perform mutual authentication processing between the power storage device 120 newly placed in the charging space and the charging station 20.

[0113] (Step S103) The power storage device 120 determines whether the authentication with the charging station 20 is successful.

[0114] (Step S104) The power storage device 120 stores the station ID of the charging station 20 for which the authentication has not been successful, in the case where the authentication with the charging station 20 has not been successful (NO in S103), and ends without performing charging.

[0115] (Step S105) The charging station 20 performs the judgment of whether the authentication with the power storage device 120 has been successful.

[0116] (Step S106) The charging station 20 transmits the battery ID of the power storage device 120 for which the authentication has not been successful to the server 30, in the case where the authentication with the power storage device 120 has not been successful (NO in S105), and ends without performing charging of the power storage device 120.

[0117] (Step S107) The power storage device 120 notifies the charging station 20 of the deterioration degree stored in the recording section 1204, in the case where the authentication with the charging station 20 has been successful (YES in S103). Here, an example of notifying the number of times of charging as the deterioration degree will be described. That is, the number of times of charging described below can be replaced with the deterioration degree, and an example other than the number of times of charging can also be replaced with the deterioration degree.

[0118] (Step S108) The charging station 20 can also inquire and obtain the number of times of charging from the server 30 according to the battery ID of the power storage device 120, in the case where the authentication with the power storage device 120 has been successful (YES in S105).

[0119] (Step S109) The server 30 notifies the number of times of charging of the corresponding power storage device 120, if the battery ID is obtained from the charging station 20.

[0120] (Step S110) The charging station 20 verifies whether the number of times of charging is contradictory, and whether the number of times of charging is equal to or less than the threshold value, according to the obtained number of times of charging.

[0121] (Step S111) The charging station 20 notifies the server 30 of the battery ID, in the case where the number of times of charging exceeds the threshold value (NO in S110), and ends without performing charging of the power storage device 120.

[0122] (Step S112) The charging station 20 starts charging of the power storage device 120, in the case where the number of times of charging is equal to or less than the threshold value (YES in S110).

[0123] (Step S113) The power storage device 120 updates the number of times of charging of the power storage device 120 stored in the recording section 1204 to a new number of times of charging obtained by adding 1 to the number of times of charging, after the charging of the power storage device 120 is completed.

[0124] (Step S114) After the charging of the electric storage device 120 is completed, the charging station 20 updates the new number of times of charging obtained by adding 1 to the number of times of charging of the electric storage device 120 obtained from the electric storage device 120, and transmits the new number of times of charging to the server 30.

[0125] (Step S115) The server 30, if obtaining the new number of times of charging of the electric storage device 120 from the charging station 20, stores the number of times of charging obtained as the number of times of charging of the electric storage device 120. The server 30 can also update the number of times of charging stored in correspondence with the battery ID of the electric storage device 120 to the newly obtained number of times of charging.

[0126] In addition, one of the steps S107, S108, and S109 can be omitted.

[0127] [1.7 Authentication sequence of secondary battery and vehicle management unit]

[0128] Hereinafter, a sequence of an authentication process between the electric storage device 120, the electric vehicle 10, and the server 30 will be described.

[0129] Figure 8 is a sequence diagram showing an example of an authentication process between an electric storage device and an electric vehicle according to the embodiment.

[0130] (Step S201) The electric storage device 120 and the electric vehicle 10 detect that the electric storage device 120 is installed in the connection unit 140 of the electric vehicle 10. The electric storage device 120 can also detect that the connection unit 140 of the electric vehicle is connected by detecting that power is supplied to the electric vehicle 10. The electric vehicle 10 can also detect that the connection unit 140 of the electric vehicle is connected by detecting that power is supplied from the electric storage device 120.

[0131] (Step S202) The electric storage device 120 and the electric vehicle 10 perform mutual authentication.

[0132] (Step S203) The electric storage device 120 performs a judgment as to whether the authentication with the electric vehicle 10 is successful.

[0133] (Step S204) The electric storage device 120, in a case where the authentication with the electric vehicle 10 is not successful (NO of S203), judges the electric vehicle 10 for which the authentication is not successful as an improper electric vehicle, stores the vehicle ID of the electric vehicle 10, and ends the process without allowing discharging to the electric vehicle 10 side.

[0134] (Step S205) The electric vehicle 10 performs a judgment as to whether the authentication with the electric storage device 120 is successful.

[0135] (Step S206) The electric vehicle 10, in a case where the authentication with the storage device 120 is not successful (NO of S205), judges the installed storage device 120 as an improper storage device, stores the battery ID of the storage device 120, and ends the process without starting the electric vehicle 10.

[0136] (Step S207) The electric vehicle 10, in a case where the authentication with the storage device 120 is successful (YES of S205), performs a judgment of whether or not the electric vehicle 10 is connected to the communication network 50. That is, the electric vehicle 10 judges whether or not network connection is performed.

[0137] (Step S208) The electric vehicle 10, in a case where it is judged that the electric vehicle 10 is connected to the communication network 50 (YES of S207), transmits the improper battery ID stored in the electric vehicle 10 to the server 30.

[0138] (Step S209) The server 30, if the battery ID is obtained from the electric vehicle 10, stores the obtained battery ID.

[0139] (Step S210) The electric vehicle 10, in a case where it is judged that the electric vehicle 10 is not connected to the communication network 50 (NO of S207), transmits the improper battery ID already stored in the electric vehicle 10 to the storage device 120 whose authentication is successful.

[0140] (Step S211) The storage device 120, in a case where the authentication with the electric vehicle 10 is successful (YES of S203), in a case where the improper battery ID is received from the electric vehicle 10, stores the received improper battery ID.

[0141] [1.8 Battery ID Notification Sequence]

[0142] Hereinafter, a sequence of the battery ID notification process between the storage device 120, the charging station 20, and the server 30 will be described.

[0143] Figure 9 is a sequence diagram showing an example of the battery ID notification process according to the embodiment.

[0144] (Step S301) As for the charging process of the storage device 120 with the charging station 20, the same as the charging process of steps S101 to S115, the description will be omitted here. Hereinafter, the process performed when the authentication process between the storage device 120 and the charging station 20 is successful will be described.

[0145] (Step S302) The storage device 120 performs a judgment of whether or not the improper battery ID is stored. The storage device 120, in a case where the improper battery ID is not stored (NO of S302), ends the notification process.

[0146] (Step S303) The storage device 120 transmits the stored fraudulent battery ID to the charging station 20 in the case where the fraudulent battery ID is stored (YES in S302).

[0147] (Step S304) The charging station 20 transmits the obtained battery ID to the server 30 if the fraudulent battery ID is obtained from the storage device 120.

[0148] (Step S305) The server 30 stores the fraudulent battery ID if the fraudulent battery ID is obtained from the charging station 20.

[0149] [1.9 Effects of Embodiments]

[0150] In the embodiments, the mutual authentication is performed between the storage device 120 and the charging station 20, or the mutual authentication is performed between the storage device 120 and the electric vehicle 10, so that the fraudulent battery can be excluded. Further, the number of times of charging of the storage device is recorded by the storage device 120 or the charging station 20, so that it is possible to detect whether the storage device 120 is deteriorated. Also, the number of times of charging is recorded to the secure chip, so that it is possible to prevent falsification of the number of times of charging and to guarantee the number of times of charging. Also, in the case where the fraudulent storage device 120 is detected, even if the electric vehicle 10 is not connected to the communication network 50, the fraudulent battery ID is transmitted to the server 30 via the normal battery, so that the fraudulent storage device can be excluded.

[0151] Also, in the embodiments, the charging station obtains the deterioration degree of the storage device stored in the first memory having the falsification resistance from the storage device whose legitimacy is confirmed by the mutual authentication, and in the case where the deterioration degree shows more deterioration than a prescribed threshold value, the storage device is not charged. Thus, the deterioration degree without falsification is used to appropriately judge whether to perform charging of the storage device. Therefore, it is possible to suppress the deteriorated storage device from being used and circulated. Thereby, it is possible to maintain the amount of electricity that can be used by the storage device to be a certain amount or more.

[0152] [2. Other Modified Examples]

[0153] Further, although the present disclosure is described in accordance with the respective embodiments, the present disclosure is of course not limited to the respective embodiments. The following cases are also included in the present disclosure.

[0154] (1) In the above-described embodiments, the electric vehicle 10 stores the battery ID in Step S206, but the same judgment as Step S207 can be performed when the battery ID is stored. The Step S208 can be performed in the case of YES and the process can be ended in the case of NO, according to the result of the judgment at that time.

[0155] (2) In the above-described embodiment, the number of times of charging is notified from the electric storage device 120 to the charging station 20, but the charge and discharge history of the electric storage device 120 or sensor information obtained by the electric vehicle 10 can be recorded and transmitted. The sensor information obtained by the electric vehicle 10 can be transmitted and received between the electric storage device 120 and the electric vehicle 10 at the time of mutual authentication of the electric storage device 120 and the electric vehicle 10. The charging station 20 can transmit the information obtained from the electric storage device 120 to the server 30.

[0156] (3) In the above-described embodiment, the electric vehicle 10 and the electric storage device 120 perform mutual authentication, but in the case where the electric vehicle 10 is connected to the communication network 50, the server 30 can be inquired whether the electric storage device 120 is improper or deteriorated.

[0157] (4) In the above-described embodiment, the electric vehicle 10 and the electric storage device 120 perform mutual authentication at the time of installation of the electric storage device 120, but the mutual authentication can be performed at the time of start of the electric vehicle 10. Also, the electric vehicle 10 can perform the mutual authentication at the time of charging by the charging device 40.

[0158] (5) In the above-described embodiment, the electric vehicle 10 and the electric storage device 120 perform mutual authentication, but in the case where the authentication is not successful, the electric power from the electric storage device 120 can not be supplied to the electric vehicle 10.

[0159] (6) In the above-described embodiment, the battery ID, the station ID of the charging station 20, and the vehicle ID of the electric vehicle 10 can also use the ID described in the certificate of the encryption key.

[0160] (7) In the above-described embodiment, the electric vehicle 10 can also authenticate the user who operates the electric vehicle 10. At this time, the electric vehicle 10 can obtain the user information from the server 30, can transmit the user information to the server 30, and authenticate the user by the server 30, and obtain the authentication result from the server 30.

[0161] (8) In the above-described embodiment, the server 30 performs the management of issuance and invalidation of the encryption key and the certificate, but the issuance of the encryption key and the certificate can be performed by a third party organization.

[0162] (9) In the above-described embodiment, the number of times of charging of the electric storage device 120 is obtained from the electric storage device 120 and the server 30 in the charging station 20, but at this time, in the case where the difference between the number of times of charging obtained from the server 30 and the number of times of charging and the amount of charging obtained from the electric storage device 120 is equal to or more than a threshold value, it can be determined that the electric storage device 120 is improperly charged. The threshold value can be 1 or more.

[0163] Specifically, the charging station 20, after determining "Yes" in step S105, obtains the number of times of charging from the electric storage device 120, and obtains the number of times of charging of the electric storage device 120 from the server 30. The charging station 20 can further determine whether the number of times of charging obtained from the electric storage device 120 coincides with the number of times of charging of the electric storage device 120 obtained from the server 30. The charging station 20 can not perform charging of the electric storage device 120 in a case where the number of times of charging obtained from the electric storage device 120 does not coincide with the number of times of charging of the electric storage device 120 obtained from the server 30. Also, the charging station 20 can determine that the electric storage device 120 is an improper battery in a case where the number of times of charging obtained from the electric storage device 120 does not coincide with the number of times of charging of the electric storage device 120 obtained from the server 30, and notify the server 30 of the battery ID of the electric storage device 120 as an improper battery ID. The server 30 can store the notified battery ID as an improper battery ID. In addition, the charging station 20 can perform charging of the electric storage device 120 in a case where the number of times of charging obtained from the electric storage device 120 coincides with the number of times of charging of the electric storage device 120 obtained from the server 30.

[0164] In addition, as described above, the number of times of charging stored in the electric storage device 120 is made to coincide with the number of times of charging stored in the server 30 as a condition for charging the electric storage device 120, and thus, the number of times of charging of the electric storage device 120 or information showing that charging has been performed needs to be notified to the server 30 each time charging of the electric storage device 120 is performed. Therefore, if the electric storage device 120 is connected to the communication network 50 alone, the number of times of charging can be notified from the electric storage device 120 to the server 30 each time charging is performed.

[0165] Also, if the charging device 40 is connected to the communication network 50, the charging device 40 notifies the server 30 of information showing that charging of the electric storage device 120 has been performed, and the server 30 updates the stored number of times of charging of the electric storage device 120. That is, the server 30 increases the stored number of times of charging of the electric storage device 120 by 1.

[0166] Also, the charging device 40 can obtain the number of times of charging from the electric storage device 120, and notify the server 30 of a new number of times of charging obtained by increasing the number of times of charging after charging by 1. The server can update the stored number of times of charging of the electric storage device 120 to the notified new number of times of charging.

[0167] (10) The electric vehicle 10 can also be classified into a plurality of levels in terms of the amount of power consumption per unit time (i.e., power consumption). The vehicle ID of the electric vehicle 10 can also correspond to the plurality of levels based on the power consumption. For example, in the case of being classified into a level A of small power consumption, a level B of intermediate power consumption, and a level C of large power consumption, the respective vehicle IDs can also correspond to level information showing any one of the levels A to C.

[0168] Further, each of the electric power storage devices 120 stores the vehicle ID or the level information of the mounted electric vehicle 10, and transmits the vehicle ID or the level information of the mounted electric vehicle 10 to the server 30 via the charging station 20. The charging station 20 can also obtain the vehicle ID or the level information of the electric vehicle 10 in which the electric power storage device 120 was previously mounted, together with the number of times of charging of the connected electric power storage device 120, from the server 30 in step S108, and correct the number of times of charging in accordance with the level information obtained from the vehicle ID or the obtained level information. The charging station 20 can also correct the number of times of charging, for example, in a manner that the more the number of times of connection with the level C, the more the deterioration, or in a manner that the more the number of times of connection with the level A, the less the deterioration.

[0169] The charging station 20 can also utilize the level information for the calculation of the degree of deterioration, not limited to the correction of the number of times of charging. That is, the charging station 20 can also calculate the degree of deterioration, for example, in a manner that the more the number of times of connection with the level C, the more the value of deterioration, or in a manner that the more the number of times of connection with the level A, the more the value of no further deterioration.

[0170] (11) Each of the devices in the above-described embodiments is specifically a computer system constituted by a microprocessor, a ROM, a RAM, a hard disk unit, a display unit, a keyboard, a mouse, and the like. In the RAM or the hard disk unit, a computer program is recorded. Each of the devices achieves the function by the microprocessor operating in accordance with the computer program. Here, the computer program is constituted by combining a plurality of command codes representing instructions for a computer in order to achieve a prescribed function.

[0171] (12) Each of the devices in the above-described embodiments can also be constituted by a part or all of the constituent elements thereof by one system LSI (Large Scale Integration). The system LSI is a super multifunctional LSI manufactured by integrating a plurality of constituent units on one chip, and specifically includes a computer system constituted by a microprocessor, a ROM, a RAM, and the like. In the RAM, a computer program is recorded. The microprocessor operates in accordance with the computer program, and accordingly, the system LSI achieves its function.

[0172] Also, each of the components constituting each of the devices described above can be individually implemented as one chip, or can be implemented as one chip including part or all of them

[0173] Also, this is assumed to be a system LSI, but depending on the difference in integration level, it is sometimes referred to as an IC, LSI, super LSI, or ultra LSI. Also, the method of integration is not limited to the LSI, and can be implemented by a dedicated circuit or a general-purpose processor. A Field Programmable Gate Array (FPGA) that can be programmed after the LSI fabrication, a reconfigurable processor where connections and settings of circuit cells inside the LSI can be reconfigured, or the like can be used.

[0174] Further, if a technology of forming an integrated circuit that replaces the LSI appears due to advancement of semiconductor technology or other technology, of course, the technology can be used to integrate the functional blocks. Application of biotechnology or the like is also possible.

[0175] (13) Part or all of the components constituting each of the devices described above can be constituted by an IC card or a module that can be attached to and detached from each of the devices. The IC card or the module is a computer system constituted by a microprocessor, a ROM, a RAM, and the like. The IC card or the module can include the super multifunctional LSI described above. The microprocessor operates according to a computer program, and thus the IC card or the module achieves its function. The IC card or the module can have tamper resistance.

[0176] (14) Also, the present disclosure can be the method described above. Also, it can be a computer program in which these methods are implemented by a computer, and can be a digital signal constituted by a computer program.

[0177] Also, the present disclosure can record the computer program or the digital signal to a computer-readable recording medium such as a flexible disk, a hard disk, a CD-ROM, an MO, a DVD, a DVD-ROM, a DVD-RAM, a BD (Blu-ray (registered trademark) Disc), a semiconductor memory, and the like. Also, it can be a digital signal recorded in these recording media.

[0178] Also, the present disclosure can transmit the computer program or the digital signal via an electric communication line, a wireless or wired communication line, a network represented by the Internet, a data broadcast, and the like.

[0179] Also, the present disclosure can be a computer system that has a microprocessor and a memory, the memory records the computer program described above, and the microprocessor operates according to the computer program.

[0180] Also, the program or digital signal can be recorded in a recording medium and transferred, or the program or digital signal can be transferred via a network or the like, so as to be executed by an independent other computer system.

[0181] (14) The above-described embodiments and the above-described modified examples can be combined, respectively.

[0182] The present disclosure can also record an encryption key and a number of times of charging to a security chip in a battery management system, exclude an improper battery, and perform exclusion of a battery with a large number of times of charging.

[0183] Glossary of Symbols

[0184] 10 Electric vehicle

[0185] 20 Charging station

[0186] 30 Server

[0187] 40 Charging device

[0188] 50 Communication network

[0189] 100 Battery management system

[0190] 110 Vehicle management unit

[0191] 120 Accumulator

[0192] 130 Communication unit

[0193] 140 Connection unit

[0194] 201 User authentication unit

[0195] 202 Battery authentication unit

[0196] 203 Control unit

[0197] 204 Recording unit

[0198] 205 Communication unit

[0199] 301 User management unit

[0200] 302 Battery management unit

[0201] 303 Encryption key management unit

[0202] 304 Recording unit

[0203] 305 Communication unit

[0204] 1101 Authentication unit

[0205] 1102 Control unit

[0206] 1103 charge management section

[0207] 1104 recording section

[0208] 1201 authentication section

[0209] 1202 measurement section

[0210] 1203 control section

[0211] 1204 recording section

[0212] 1205 communication section

Claims

1. A charging station, charging an electric storage device, the charging station comprising: an authentication unit that performs mutual authentication with the electric storage device connected for charging; an acquisition unit that acquires, from the electric storage device confirmed to be authentic in the mutual authentication, a deterioration degree relating to deterioration of the electric storage device; a storage that stores the deterioration degree acquired by the acquisition unit and has tamper resistance; and a control unit that does not charge the electric storage device in a case where the deterioration degree of the electric storage device stored in the storage shows more deterioration than a prescribed threshold value, the acquisition unit further acquires an identifier of the electric storage device, the control unit transmits the identifier of the electric storage device to a management device in a case where the deterioration degree of the electric storage device shows more deterioration than the prescribed threshold value.

2. The charging station according to claim 1, the control unit charges the electric storage device in a case where the deterioration degree of the electric storage device does not show more deterioration than the prescribed threshold value.

3. The charging station according to claim 1, the deterioration degree is at least one of a number of times of charging, a charging amount, and SOH, which is State Of Health.

4. The charging station according to claim 1, the deterioration degree is a number of times of charging, the control unit transmits, to a management device, a new number of times of charging obtained by adding 1 to the number of times of charging of the electric storage device stored in the storage in a case where the electric storage device is charged.

5. A battery management system, comprising an electric storage device and a charging station, the electric storage device comprising: a first authentication unit that performs mutual authentication with the charging station connected for charging; a first storage that stores a deterioration degree relating to deterioration of the electric storage device and has tamper resistance; and a transmission unit that transmits the deterioration degree stored in the first storage to the charging station, the charging station comprising: a second authentication unit that performs mutual authentication with the electric storage device connected for charging; a second acquisition unit that acquires, from the electric storage device confirmed to be authentic in the mutual authentication, a deterioration degree relating to deterioration of the electric storage device; a second storage that stores the deterioration degree acquired by the second acquisition unit and has tamper resistance; and a control unit that does not charge the electric storage device in a case where the deterioration degree of the electric storage device stored in the second storage shows more deterioration than a prescribed threshold value, the second acquisition unit further acquires an identifier of the electric storage device, the control unit transmits the identifier of the electric storage device to a management device in a case where the deterioration degree of the electric storage device shows more deterioration than the prescribed threshold value.

6. The battery management system according to claim 5, the first authentication unit further performs mutual authentication with an electric vehicle connected to the electric storage device, the electric storage device further comprises a first acquisition unit, the first acquisition unit acquires, from the electric vehicle, an identifier of another electric storage device different from the electric storage device, The first storage stores the identifier of the other power storage device obtained by the first obtaining section, The sending section sends the identifier of the other power storage device stored in the first storage to the charging station to which the power storage device is connected for charging.

7. A charging method of a charging station that charges a power storage device, In the charging method, mutual authentication is performed between the power storage device connected to the charging station for charging and the charging station, a degree of deterioration related to deterioration of the power storage device is obtained from the power storage device whose legitimacy is confirmed in the mutual authentication, the obtained degree of deterioration is stored in a storage included in the charging station and having tamper resistance, in a case where the degree of deterioration of the power storage device stored in the storage shows more deterioration than a prescribed threshold value, the power storage device is not charged, an identifier of the power storage device is obtained, in a case where the degree of deterioration of the power storage device shows more deterioration than the prescribed threshold value, the identifier of the power storage device is sent to a management device.

Images